Overview

overview

6

Static

static

3

AutoUpdate.exe

windows7-x64

3

AutoUpdate.exe

windows10-2004-x64

3

TheWorld.exe

windows7-x64

6

TheWorld.exe

windows10-2004-x64

6

plugin/Exp...ee.dll

windows7-x64

3

plugin/Exp...ee.dll

windows10-2004-x64

3

plugin/Sys...te.dll

windows7-x64

3

plugin/Sys...te.dll

windows10-2004-x64

3

plugin/rss...ew.dll

windows7-x64

3

plugin/rss...ew.dll

windows10-2004-x64

3

plugin/sti...er.exe

windows7-x64

3

plugin/sti...er.exe

windows10-2004-x64

3

twtweaker.exe

windows7-x64

3

twtweaker.exe

windows10-2004-x64

3

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abdf0b82866d93c0ae4ac6b3d59a752a_JaffaCakes118

  • Size

    543KB

  • MD5

    abdf0b82866d93c0ae4ac6b3d59a752a

  • SHA1

    f65c25e8f42440494f3a2527d5ae3af0d0b24992

  • SHA256

    f877bcbdcb22b880595269a6e19b0c6f6f11e7d84b87d8fa789130dc91d5260d

  • SHA512

    84612ee2d9a67a634aa728eea1092c3a950057dcf7f6eaea6aef80adc9070eea5c3e0b5814d015c6119f540d2f3de0f09ed6632a5e8d00c4e22ca1588475c613

  • SSDEEP

    12288:lGQstb7nyrVANlCEPXda5tfWzUwmGY7CL+fc4bL8lWV:l1uu4vPmGYWEEWV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • abdf0b82866d93c0ae4ac6b3d59a752a_JaffaCakes118
    .rar
  • AutoUpdate.exe
    .exe windows:4 windows x86 arch:x86

    75baa310d1a67066ada7d9ea7fdb5e5c


    Headers

    Imports

    Sections

  • TheWorld.exe
    .exe windows:4 windows x86 arch:x86

    09065aef7d90a192eac4436db1d2e0a8


    Headers

    Imports

    Sections

  • license.txt
  • plugin/ExplorerTree/ExplorerTree.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c77c0041eb8fc77118744280a3eb730d


    Headers

    Imports

    Exports

    Sections

  • plugin/ExplorerTree/plugin.ini
  • plugin/SysState/SysState.dll
    .dll windows:4 windows x86 arch:x86

    b5047863bb91343d80b5b843f6821ed4


    Headers

    Imports

    Exports

    Sections

  • plugin/SysState/plugin.ini
  • plugin/rssview/RssView.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    69462fa519c2c8a857ed5e69f8bd5ff4


    Headers

    Imports

    Exports

    Sections

  • plugin/rssview/plugin.ini
  • plugin/rssview/rssview.ico
  • plugin/sticker/Sticker.exe
    .exe windows:4 windows x86 arch:x86

    b5c4d293ab0a5124dde8e9d8c300cfba


    Headers

    Imports

    Sections

  • plugin/sticker/plugin.ini
  • plugin/sticker/sticker.ico
  • skin/Safari/1001.bmp
  • skin/Safari/1002.bmp
  • skin/Safari/1003.bmp
  • skin/Safari/1004.bmp
  • skin/Safari/1005.bmp
  • skin/Safari/1006.bmp
  • skin/Safari/1007.bmp
  • skin/Safari/1008.bmp
  • skin/Safari/1009.bmp
  • skin/Safari/1010.bmp
  • skin/Safari/1011.bmp
  • skin/Safari/1012.bmp
  • skin/Safari/1013.bmp
  • skin/Safari/1014.bmp
  • skin/Safari/1015.bmp
  • skin/Safari/212.bmp
  • skin/Safari/231.bmp
  • skin/Safari/232.bmp
  • skin/Safari/241.bmp
  • skin/Safari/242.bmp
  • skin/Safari/243.bmp
  • skin/Safari/244.bmp
  • skin/Safari/249.bmp
  • skin/Safari/262.bmp
  • skin/Safari/265.bmp
  • skin/Safari/preview.gif
    .gif
  • skin/Safari/skin.ini
  • twtweaker.exe
    .exe windows:4 windows x86 arch:x86

    7839cf8f383133c3b966971b3d552a77


    Headers

    Imports

    Sections

  • 安装说明.url
    .url